CVE-2003-0254: Medium severity Apache HTTP Server vulnerability
Published Jul 10, 2003
·Updated
Apache 2 before 2.0.47, when running on an IPv6 host, allows attackers to cause a denial of service (CPU consumption by infinite loop) when the FTP proxy server fails to create an IPv6 socket.
Affected Software
15 affected components
Apache HTTP Server=2.0.42
Apache HTTP Server=2.0.35
Apache HTTP Server=2.0.37
Apache HTTP Server=2.0.44
Apache HTTP Server=2.0.39
Apache HTTP Server=2.0.41
Apache HTTP Server=2.0.32
Apache HTTP Server=2.0.38
Apache HTTP Server=2.0.45
Apache HTTP Server=2.0.43
Apache HTTP Server=2.0.36
Apache HTTP Server=2.0.46
Apache HTTP Server=2.0
Apache HTTP Server=2.0.28
Apache HTTP Server=2.0.40
Remediation
Patch Available
Event History
Jul 10, 2003
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Aug 18, 2003
Data Sourced
via NVD·04:00 AM
RemedyDescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2003-0254?
CVE-2003-0254 is considered a moderate severity vulnerability due to its potential to cause a denial of service.
2
How do I fix CVE-2003-0254?
To fix CVE-2003-0254, upgrade to Apache version 2.0.47 or later.
3
What type of vulnerability is CVE-2003-0254?
CVE-2003-0254 is a denial of service vulnerability.
4
What software is affected by CVE-2003-0254?
CVE-2003-0254 affects Apache HTTP Server versions 2.0 up to 2.0.46.
5
How does CVE-2003-0254 affect an IPv6 host?
On an IPv6 host, CVE-2003-0254 allows attackers to cause high CPU consumption through an infinite loop when the FTP proxy fails to create an IPv6 socket.